What’s Vulnerable › Vulnerabilities

CVE-2022-49858: octeontx2-pf: Fix SQE threshold checking

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-01 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which is based on HW updated SQB count could result in driver submitting an SQE even before CQE for the previously transmitted SQE at the same index is processed in NAPI resulting losing SKB pointers, hence a leak. Fix this by checking a consumer index which is updated once CQE is processed.

Affected products

• Linux kernel: from 5.6 before 6.0.9; 6.1-rc1, 6.1-rc2, 6.1-rc3, 6.1-rc4 — fixed in 6.0.9

How to fix

Upgrade to a fixed version: Linux kernel 6.0.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/015e3c0a3b16193aab23beefe4719484b9984c2d
• https://git.kernel.org/stable/c/f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb

Get alerted when CVE-2022-49858 or the next vulnerability affects your stack